Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/4004adbf-492d-399b-a7a6-22b88bf525b6.roa
File:                     4004adbf-492d-399b-a7a6-22b88bf525b6.roa (raw, json)
Hash identifier:          OC7zxMC6lQz865/z6BIrB2R7AqGV9eEomT+ZnSngW0o=
Subject key identifier:   8A:CB:0A:5F:AA:D7:14:2B:19:1D:64:39:3B:8D:CE:14:6D:92:B2:A0
Certificate issuer:       /CN=e0b35546-769e-41a6-987e-2a9732555de4
Certificate serial:       010D0C9F43285847D834C3E1E3B604C95674EB80
Authority key identifier: FD:F6:17:A5:81:7C:B3:18:B7:E3:11:FF:B0:FC:DF:D3:EC:CC:08:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/4004adbf-492d-399b-a7a6-22b88bf525b6.roa
Signing time:             Mon 11 Nov 2024 14:00:39 +0000
ROA not before:           Mon 11 Nov 2024 14:00:39 +0000
ROA not after:            Sun 09 Feb 2025 14:00:39 +0000
asID:                     400859
IP address blocks:        64.49.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/e0b35546-769e-41a6-987e-2a9732555de4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/e0b35546-769e-41a6-987e-2a9732555de4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d8:34:c3:e1:e3:b6:04:c9:56:74:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0b35546-769e-41a6-987e-2a9732555de4
        Validity
            Not Before: Nov 11 14:00:39 2024 GMT
            Not After : Feb  9 14:00:39 2025 GMT
        Subject: CN=88131ff0-46f7-4f5a-b57f-d46a28ece0df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e4:65:27:83:7d:65:20:c7:6d:05:4e:13:a0:
                    43:41:36:eb:80:82:56:97:ba:e1:30:5e:23:89:3e:
                    df:9b:b8:82:6e:74:6a:04:4b:f6:3e:6f:1a:1f:d5:
                    f8:12:75:10:8a:6a:82:91:b2:67:b3:a5:54:59:f1:
                    a1:fd:b4:39:9e:77:e1:25:9a:f2:07:6c:67:cc:cd:
                    c0:e9:b7:a7:d8:1f:7b:2d:c8:95:5a:b2:3a:a7:2a:
                    7f:94:bb:13:0b:36:98:23:8b:04:bf:ec:48:11:1b:
                    2b:ec:5a:6c:e4:4c:e5:11:9e:b5:4d:37:15:53:70:
                    2d:17:bf:1a:c4:37:25:f3:16:00:d4:33:36:d6:d1:
                    25:1f:6b:09:4d:86:d3:37:e6:31:00:9c:2e:69:37:
                    69:e7:32:05:43:ea:4b:2e:37:0e:8e:94:bb:62:f6:
                    72:e8:52:45:40:8a:3b:9e:f6:d1:10:5e:e4:20:30:
                    b6:05:34:e7:45:b2:14:5a:cb:78:7c:be:5c:b0:71:
                    b9:f1:23:5b:a0:f4:e7:55:c2:ba:55:ce:ae:dc:33:
                    49:b0:12:f2:79:4b:60:66:55:28:38:56:3f:a3:20:
                    02:8f:9e:23:62:ab:25:c1:2b:31:a3:18:a2:a6:3e:
                    e5:8c:73:d8:1f:3a:a0:80:01:86:33:fa:03:95:bb:
                    7e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:CB:0A:5F:AA:D7:14:2B:19:1D:64:39:3B:8D:CE:14:6D:92:B2:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/4004adbf-492d-399b-a7a6-22b88bf525b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/e0b35546-769e-41a6-987e-2a9732555de4.crl

            X509v3 Authority Key Identifier:
                keyid:FD:F6:17:A5:81:7C:B3:18:B7:E3:11:FF:B0:FC:DF:D3:EC:CC:08:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:e8:be:9b:7b:50:3a:c7:ec:e4:75:cc:1e:be:07:e5:4c:45:
         48:c6:2a:0d:95:85:63:1f:43:b3:a8:ea:03:03:47:16:12:f7:
         e0:1b:99:51:d7:17:59:93:b3:3d:1f:65:c2:12:22:5c:f8:88:
         a0:d0:e6:64:f5:cc:14:07:b5:c5:90:33:30:66:18:81:1d:5d:
         b3:6b:02:6f:3d:c2:e4:2c:8f:de:a7:15:11:cf:a1:a8:cd:e1:
         10:8a:9b:c5:d8:78:8a:07:85:1d:68:5e:26:e3:e6:9f:1d:6a:
         be:27:a3:ba:46:60:94:23:29:c3:d4:6f:19:d1:62:41:63:97:
         b9:df:b4:5b:6d:36:52:f0:2b:a6:a0:73:be:fe:96:b6:f4:70:
         9f:0d:c5:f6:45:05:a7:be:88:e5:93:32:c5:f9:a5:4a:d1:a0:
         09:73:19:08:26:ab:7f:e4:5e:27:0e:51:97:40:95:23:8a:cf:
         cc:7e:64:a4:57:cb:d8:e2:89:89:5c:f5:1e:67:e4:a0:3c:ca:
         70:20:29:2d:fa:59:b6:c1:49:66:02:54:60:e5:ca:fd:8f:d2:
         a1:67:c5:bd:8d:67:27:1e:c7:e5:23:0f:5a:34:3d:a6:a3:f3:
         bc:21:99:8a:18:8d:69:ec:8c:0a:39:bc:06:92:24:97:66:98:
         13:bb:e3:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfYNMPh47YEyVZ064AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTBiMzU1NDYtNzY5ZS00MWE2LTk4N2UtMmE5NzMyNTU1
ZGU0MB4XDTI0MTExMTE0MDAzOVoXDTI1MDIwOTE0MDAzOVowLzEtMCsGA1UEAxMk
ODgxMzFmZjAtNDZmNy00ZjVhLWI1N2YtZDQ2YTI4ZWNlMGRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouRlJ4N9ZSDHbQVOE6BDQTbrgIJWl7rhMF4j
iT7fm7iCbnRqBEv2Pm8aH9X4EnUQimqCkbJns6VUWfGh/bQ5nnfhJZryB2xnzM3A
6ben2B97LciVWrI6pyp/lLsTCzaYI4sEv+xIERsr7Fps5EzlEZ61TTcVU3AtF78a
xDcl8xYA1DM21tElH2sJTYbTN+YxAJwuaTdp5zIFQ+pLLjcOjpS7YvZy6FJFQIo7
nvbREF7kIDC2BTTnRbIUWst4fL5csHG58SNboPTnVcK6Vc6u3DNJsBLyeUtgZlUo
OFY/oyACj54jYqslwSsxoxiipj7ljHPYHzqggAGGM/oDlbt+bQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIrLCl+q1xQrGR1kOTuNzhRtkrKgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMGIz
NTU0Ni03NjllLTQxYTYtOTg3ZS0yYTk3MzI1NTVkZTQvNDAwNGFkYmYtNDkyZC0z
OTliLWE3YTYtMjJiODhiZjUyNWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTBiMzU1NDYtNzY5ZS00MWE2LTk4
N2UtMmE5NzMyNTU1ZGU0L2UwYjM1NTQ2LTc2OWUtNDFhNi05ODdlLTJhOTczMjU1
NWRlNC5jcmwwHwYDVR0jBBgwFoAU/fYXpYF8sxi34xH/sPzf0+zMCKgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lMGIzNTU0Ni03NjllLTQxYTYtOTg3ZS0yYTk3
MzI1NTVkZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQDEuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIHovpt7UDrH7OR1zB6+B+VMRUjGKg2VhWMfQ7Oo6gMDRxYS9+AbmVHX
F1mTsz0fZcISIlz4iKDQ5mT1zBQHtcWQMzBmGIEdXbNrAm89wuQsj96nFRHPoajN
4RCKm8XYeIoHhR1oXibj5p8dar4no7pGYJQjKcPUbxnRYkFjl7nftFttNlLwK6ag
c77+lrb0cJ8NxfZFBae+iOWTMsX5pUrRoAlzGQgmq3/kXicOUZdAlSOKz8x+ZKRX
y9jiiYlc9R5n5KA8ynAgKS36WbbBSWYCVGDlyv2P0qFnxb2NZycex+UjD1o0Paaj
87whmYoYjWnsjAo5vAaSJJdmmBO74yI=
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:05:03 2024 by rpki-client on console-fra.rpki-client.org